-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 22 Mar 2020 10:55:38 +0100 Source: bluez Architecture: source Version: 5.50-1.2~deb10u1 Distribution: buster-security Urgency: high Maintainer: Debian Bluetooth Maintainers <team+pkg-bluetooth@tracker.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 953770 Changes: bluez (5.50-1.2~deb10u1) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * Rebuild for buster-security. . bluez (5.50-1.2) unstable; urgency=medium . * Non-maintainer upload. * input: hog: Attempt to set security level if not bonded * input: Add LEAutoSecurity setting to input.conf . bluez (5.50-1.1) unstable; urgency=high . * Non-maintainer upload. * Address INTEL-SA-00352 (CVE-2020-0556) (Closes: #953770) - HOGP must only accept data from bonded devices - HID accepts bonded device connections only Checksums-Sha1: e810369eceb75489b4220a3fdfc1c11c9e045f83 2743 bluez_5.50-1.2~deb10u1.dsc 43669b5d969026c361313e739a034f79ab15fb01 1498252 bluez_5.50.orig.tar.xz 5fd3f1bf3a447fc5d01babd9b2125dda868a7b7b 35060 bluez_5.50-1.2~deb10u1.debian.tar.xz Checksums-Sha256: ba9e3acc6d8d234498d1db98816499350e4c7607dd2b3fd7637cf321507e57b6 2743 bluez_5.50-1.2~deb10u1.dsc 289aa3b5ab92ab4ca1b58d034e72b082e7c91b78634f48df6293554eda4d04ec 1498252 bluez_5.50.orig.tar.xz bdf75164e435ceefd4b176fc5a7a4cb05bfd2afefc8ebdc02f6c19cab4c55d56 35060 bluez_5.50-1.2~deb10u1.debian.tar.xz Files: 5d2b22db1cb8150825f78f3f99d2d8e3 2743 admin optional bluez_5.50-1.2~deb10u1.dsc bbedd1beaa03610cf9f10bd2cede9ec0 1498252 admin optional bluez_5.50.orig.tar.xz 311390b60c84ed21ceb4f6882bfea413 35060 admin optional bluez_5.50-1.2~deb10u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAl53NyhfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EpcMQAJXYEm27tc0A6wy1j+JkZxw3PwW7DXL5 pkRraeaDqr8RdRK2BIgGI0rg7J8bBbEydzYNc/j4WxW6lsLmGExoJZ/vyyB5JyWr G5Z58Pta3hi6xmpxGMLF8PUK7rSZCrf7mh08YeAXfmcdID28Yr22xZmSkbsiWcvO +lZ/UXO9w+1mnnDcdJIAaZWxmcWpFWmdZca/+fswiGnFeuXkgyHhqnxsVse9U6Hq 825nrfuQP2ver1T2ykmRA57n6BhbmMrZJffQbx5FMpE66eo3xkn1juN5Q/281E1s rhFCxL+ih7aWDycsigC7kJOwrnpBqk5cOUSjdg3uSs/SiAk2DyPCsay4nHjohDby rJjjTgGaJoBeksKE0Id7GM8Qv3WbRnzyablkxr4OPRcmBWoZ3wVpST8rJylHFNSV sMxH/A2/q/mUAwvm3tn6Pz6UIYkndSJ0FvbqDRIp837Qz3uPpp/LTx9EW6joUSkY sKa4QKgqtnFI77mpRoBNc2r+/vXqGReAHcpaL68RPvYGHp5e5TB5sQZ/1FEqLuTf 4FhvMeXowoVyjmic1XgOaEo0gIY6tiMYZOMxpdiZqcyKPQiSvh0mTkpb8SqxX3Q1 SZgBvyYV8BOSGZMvv5AU/KoX6OnT54PlAmSPL2gpyjhjJLSc0Thjy8ejHlHZWIaF amPvv23iB3EM =vzyZ -----END PGP SIGNATURE-----